Traffic Trace Info
DumpFile: -
Id: 200803190445
StartTime: Wed Mar 19 04:45:00 2008
EndTime: Wed Mar 19 05:00:00 2008
TotalTime: 899.96 seconds
TotalCapSize: 531.91MB CapLen: 96 bytes
# of packets: 9741202 (5630.27MB)
AvgRate: 52.47Mbps stddev:10.19M
IP flow (unique src/dst pair) Information
# of flows: 667498 (avg. 14.59 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.6% 2.2% 2.0% 1.4% 1.3% 1.2% 1.1% 1.0% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 372277
Top 10 bandwidth usage (bytes/total in %):
13.0% 12.9% 11.3% 6.8% 3.8% 3.5% 2.9% 2.6% 2.4% 2.2%
# of IPv6 addresses: 1676
Top 10 bandwidth usage (bytes/total in %):
55.7% 51.1% 8.4% 6.9% 3.6% 3.2% 2.9% 2.8% 2.3% 1.8%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](200803190445.pktlen.png)
detailed numbers
[ 32- 63]: 2079385
[ 64- 127]: 2745237
[ 128- 255]: 806517
[ 256- 511]: 438915
[ 512- 1023]: 154631
[ 1024- 2047]: 3516517
Protocol Breakdown
![[protocol breakdown chart]](200803190445.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 9741202 (100.00%) 5903767859 (100.00%) 606.06
ip 9711058 ( 99.69%) 5894830871 ( 99.85%) 607.02
tcp 7236787 ( 74.29%) 5309965969 ( 89.94%) 733.75
http(s) 2321405 ( 23.83%) 3184123085 ( 53.93%) 1371.64
http(c) 1175015 ( 12.06%) 128951081 ( 2.18%) 109.74
squid 656589 ( 6.74%) 499544617 ( 8.46%) 760.82
smtp 788142 ( 8.09%) 113115511 ( 1.92%) 143.52
ftp 74013 ( 0.76%) 6472815 ( 0.11%) 87.46
pop3 2709 ( 0.03%) 983822 ( 0.02%) 363.17
imap 2138 ( 0.02%) 460894 ( 0.01%) 215.57
telnet 2541 ( 0.03%) 163771 ( 0.00%) 64.45
ssh 430515 ( 4.42%) 403076960 ( 6.83%) 936.27
dns 2203 ( 0.02%) 182351 ( 0.00%) 82.77
bgp 206 ( 0.00%) 63371 ( 0.00%) 307.63
napster 6 ( 0.00%) 677 ( 0.00%) 112.83
realaud 30 ( 0.00%) 5983 ( 0.00%) 199.43
rtsp 156 ( 0.00%) 30896 ( 0.00%) 198.05
icecast 278 ( 0.00%) 19448 ( 0.00%) 69.96
hotline 8 ( 0.00%) 546 ( 0.00%) 68.25
other 1780832 ( 18.28%) 972770081 ( 16.48%) 546.24
udp 2137193 ( 21.94%) 551521313 ( 9.34%) 258.06
dns 1347922 ( 13.84%) 194011137 ( 3.29%) 143.93
realaud 9006 ( 0.09%) 5470715 ( 0.09%) 607.45
halflif 24 ( 0.00%) 3032 ( 0.00%) 126.33
starcra 42 ( 0.00%) 8154 ( 0.00%) 194.14
everque 44 ( 0.00%) 6728 ( 0.00%) 152.91
unreal 12 ( 0.00%) 1730 ( 0.00%) 144.17
quake 6 ( 0.00%) 456 ( 0.00%) 76.00
cuseeme 3 ( 0.00%) 553 ( 0.00%) 184.33
other 780098 ( 8.01%) 352003655 ( 5.96%) 451.23
icmp 324668 ( 3.33%) 31551563 ( 0.53%) 97.18
ipip 320 ( 0.00%) 38416 ( 0.00%) 120.05
ip6 1076 ( 0.01%) 148257 ( 0.00%) 137.79
other 11014 ( 0.11%) 1605353 ( 0.03%) 145.76
frag 1501 ( 0.02%) 1307533 ( 0.02%) 871.11
ip6 30144 ( 0.31%) 8936988 ( 0.15%) 296.48
tcp6 4787 ( 0.05%) 853038 ( 0.01%) 178.20
http(s) 89 ( 0.00%) 106210 ( 0.00%) 1193.37
http(c) 1905 ( 0.02%) 292380 ( 0.00%) 153.48
smtp 550 ( 0.01%) 194166 ( 0.00%) 353.03
pop3 35 ( 0.00%) 3232 ( 0.00%) 92.34
ssh 1 ( 0.00%) 74 ( 0.00%) 74.00
dns 13 ( 0.00%) 1747 ( 0.00%) 134.38
bgp 79 ( 0.00%) 14104 ( 0.00%) 178.53
other 2115 ( 0.02%) 241125 ( 0.00%) 114.01
udp6 17052 ( 0.18%) 2874685 ( 0.05%) 168.58
dns 15491 ( 0.16%) 2560550 ( 0.04%) 165.29
other 1561 ( 0.02%) 314135 ( 0.01%) 201.24
icmp6 4789 ( 0.05%) 644325 ( 0.01%) 134.54
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 3486 ( 0.04%) 4560860 ( 0.08%) 1308.34
tcpdump file: 200803190445.dump.gz (251.79 MB)